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WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 

- Extensions of time may be available under the provisions of 37 CFR 1 .136(a). In no event, however, may a reply be timely filed 
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Status 

1 )^ Responsive to communication(s) filed on 12 June 2009 . 
2a )□ This action is FINAL. 2b)|3 This action is non-final. 

3) D Since this application is in condition for allowance except for formal matters, prosecution as to the merits is 

closed in accordance with the practice under Ex parte Quayle, 1935 CD. 11, 453 O.G. 213. 

Disposition of Claims 

4) ^ Claim(s) 1-30 is/are pending in the application. 

4a) Of the above claim(s) is/are withdrawn from consideration. 

5) n Claim(s) is/are allowed. 

6) IEI Claim(s) 1-30 is/are rejected. 
/)□ Claim(s) is/are objected to. 

8) 0 Claim(s) are subject to restriction and/or election requirement. 
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application from the International Bureau (PCT Rule 17.2(a)). 
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DETAILED ACTION 

1 . Currently pending claims are 1 - 30. 

Response to Arguments 

2. Applicant's arguments filed on 6/12/2009 have been fully considered and are 
persuasive. Therefore, the rejection has been withdrawn and, upon further consideration, a new 
ground(s) of rejection has been made - PROSECUTION IS HEREBY REOPENED. 

Claim Rejections - 35 USC § 102 

The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that form the 
basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

3. Claims 1 - 30 are rejected under 35 U.S.C. 102(b) as being anticipated by Epstein (U.S. 
Patent 6,023,510). 

As per claim 1, 12, 19, 22 and 28 - 30, Epstein teaches a method for provision of access 
for a data requesting entity (Epstein: Column 3 Line 36-51: user terminal is equivalent to a 
data requesting entity) to data related to a principal (Epstein: Column 3 Line 43 - 51 / Line 64: 
the user information (e.g. user public key, random number and etc.) included in the access 
request query package / message is qualified as a principal), comprising the following steps: 
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creating an access granting ticltet (Epstein: Column 3 Line 36-51: the access 
request query package / message including the user information (e.g. user public key, user 
random number and etc.) is qualified as an access granting ticket) comprising: 

(a) an access specification specifying a permission for an access to data related 
to the principal, said data being available at a data providing entity (Epstein: Column 3 
Line 36 - 51 / Line 64: the user information (e.g. user public key, user random number and etc.) 
included in the access request query package / message is qualified as an access specification 
which determines / specifies whether or not the access permission can be granted by the 
content server (i.e. data providing entity)), 

(b) a principal identifier representing the principal towards the data providing 
entity (Epstein: Column 3 Line 43 - 51 / Line 64: the user information (e.g. user public key, user 
random number and etc.) included in the access request query package / message is qualified 
as a principal); 

encrypting the access granting ticket with an encryption key of the data providing 
entity (Epstein: Column 3 Line 50 - 51). 

communicating to the data requesting entity the encrypted access granting ticket 

accompanied by an identifier of the data providing entity (Epstein: Column 3 Line 36 - 42 / 
Line 50-51: (a) the access request message is encrypted with content server's public key and 
(b) content server's public key can be considered as an identifier of the data providing entity), 

communicating from the data requesting entity to the data providing entity a 
request comprising the encrypted access granting ticket (Epstein: Column 3 Line 41: 
encrypted data access query package / message), 

decrypting the encrypted access granting ticket with a decryption key of the data 
providing entity corresponding to the encryption key (Epstein: Column 3 Line 50 - 51), 
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providing to the data requesting entity access to data related to the principal 
identifier according to the access specification (Epstein: Column 4 Line 6-11 and Column 
7 Line 21 - 30: data is downloaded to the user terminal). 

As per claim 2, 13 and 23, Epstein teaches the encrypted access granting ticket 
comprises or is accompanied by verification information and access is provided based on an 

analysis of the verification information (Epstein: Column 3 Line 36 - 42 / Line 50 - 51 : the 
encrypted access granting ticket comprises verification information as presented above). 

As per claim 3 and 24, Epstein teaches the request to the data providing entity 
comprises a specification for requested data related to the principal and access is provided 
according to a matching of the access specification and the requested data (Epstein: Column 6 
Line 56 - 64). 

As per claim 4, 14 and 21, Epstein teaches the access granting ticket is created based 
on a data storage correlating at least two items of a group comprising the identifier of the data 

providing entity, the data related to the principal available at the data providing entity, the 
principal identifier, the encryption key, and the access specification (Epstein: Column 3 Line 36 
-42 /Line 50-51). 

As per claim 5 and 1 5, Epstein teaches an indication for the access specification is 
entered into a principal entity to create the access granting ticket (Epstein: Column 3 Line 36 - 
37: the user information is entered and thus available at the user terminal device). 
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As per claim 6, 16 and 25, Epstein teaches the access granting ticket further comprises 
security information and access is provided based on an analysis of the security information 
(Epstein: Column 3 Line 36 - 42 / Line 50 - 51). 

As per claim 7, 8 and 17, Epstein teaches the encrypted access granting ticket is 
accompanied by public information (Epstein: Column 3 Line 36 - 42 / Line 50-51: the 
encrypted access granting ticket indeed comprises content server's public key information ). 

As per claim 9 and 26, Epstein teaches the decryption is based on an analysis of the 

public information (Epstein: Column 3 Line 36 - 42 / Line 50-51: the decryption of the access 
granting ticket is based upon content server's public key information ). 

As per claim 10 and 27, Epstein teaches the data to which access is provided to is 
transferred to the data requesting entity (Epstein: Column 4 Line 6-11 and Column 7 Line 21 - 
30: data is downloaded to the user terminal). 



As per claim 1 1 and 18, Epstein teaches at least one further encrypted-access granting 
ticket for further data related to the principal available at least one further data providing entity is 
created and communicated to the data requesting entity for provision of access to the further 
principal related data available at the at least one further data providing entity, the at least one 
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further encrypted access granting ticket being accompanied by at least one further identifier of 
the at least one further data providing entity (Epstein: Column 3 Line 36 - 42 / Line 50 - 51). 

As per claim 20, Epstein teaches at least one of the first encrypted access granting ticket 
and the further encrypted access granting ticket is accompanied by public information and the 
processing unit is adapted to analyze the public information before the generation of at least 
one of the first request and the further request (Epstein: Column 3 Line 36 - 42 / Line 50 - 51 : 
(a) encrypted access granting ticket comprises public information such as content server's 
public key information (b) the generation of the encryption for the request represented by 
encrypted access granting ticket must analyze the content server's public key information first 
prior to using its public key for encryption). 

Any inquiry concerning this communication or earlier communications from the examiner 
should be directed to LONGBIT CHAI whose telephone number is (571)272-3788. The 
examiner can normally be reached on Monday-Friday 9:00am-5:00pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 

supervisor, William R. Korzuch can be reached on 571-272-7589. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the Patent 
Application Information Retrieval (PAIR) system. Status information for published applications 
may be obtained from either Private PAIR or Public PAIR. Status information for unpublished 
applications is available through Private PAIR only. For more information about the PAIR 
system, see http://pair-direct.uspto.gov. Should you have questions on access to the Private 
PAIR system, contact the Electronic Business Center (EBC) at 866-217-9197 (toll-free). If you 
would like assistance from a USPTO Customer Service Representative or access to the 
automated information system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/Longbit Chai/ 

Longbit Chai Ph.D. 
Primary Patent Examiner 
Art Unit 2431 
8/17/2008 



